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FUEL CELL SYSTEM AND ASSOCIATED OPERATION METHOD 
BACKGROUND OF THE INVENTION 

[0001] 

Field of the Invention 

5 This invention relates to a technology for preventing the occurrence of problems 

caused by the freezing of water in a fuel cell due to a drop in the ambient temperature of the 
fuel cell system. 

[0002] 

10 Description of the Related Art 

In a typical fuel cell, water is created as a byproduct of electrochemical reaction. 
Where a steam reforming reaction is used to generate hydrogen to be supplied to the fuel cell, 
the hydrogen-containing gas supplied to the fuel cell includes a prescribed amount of water 
vapor. As a result, if the internal temperature of the fuel cell falls to 0°C or lower, the water 

15 inside the fuel cell may freeze. For example, if the generation of power by the fuel cell is 

stopped when the ambient temperature falls to 0°C or lower, the water may freeze inside the 
fuel cell. If the water inside the gas flow path freezes in this manner, the frozen water blocks 
the gas flow path, thereby interrupting the supply of gas. As a result, the next time the fuel 
cell is started, the electrochemical reaction may not proceed sufficiently. Therefore, Japanese 

20 Laid Open Publication 2001-23 1 108 discloses a technology whereby if the temperature falls 
while the operation of the fuel cell is stopped, the fuel cell is operated to prevent freezing 
(temperature maintenance operation). 

[0003] However, where the operation of the fuel cell is resumed while the system is 
stopped based on the internal fuel cell temperature or the external temperature as described 
25 above, accuracy in temperature detection is essential. In other words, if the detected 

temperature is not the correct temperature, power generation (temperature-maintenance 
operation) might not commence even where the temperature is below the freezing point, or 
temperature-maintenance operation may be carried out when it is not necessary. 

30 SUMMARY OF THE INVENTION 
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[0004] The present invention was devised in order to eliminate the above problem in the 
conventional art, and an object thereof is to improve the reliability of the temperature- 
maintenance operation carried out to prevent the water from freezing inside the fuel cell when 
the fuel cell system is not operating. 
5 [0005] In order to achieve the above object, a first aspect of the present invention provides 
a fuel cell system including a fuel cell. The fuel cell system pertaining to this first aspect of 
the present invention includes a temperature detector that detects the fuel cell operating 
temperature, wherein the fuel cell operating temperature is a temperature that reflects the 
internal temperature of the fuel cell, a temperature-maintenance operation controller that, if 
10 the detected fuel cell operating temperature equals or is less than a first reference temperature 
while the fuel cell system is not operating, executes temperature-maintenance operation of 
the fuel cell, an abnormality determination unit that determines whether a detection 
abnormality regarding the fuel cell operating temperature has occurred in the temperature 
detector; and a warning issuance unit that issues a warning when the abnormality 
15 determination unit determines an abnormality has occurred in the temperature detector. 
[0006] According to the fuel cell system pertaining to the first aspect of the present 
invention, the water inside the fuel cell can be prevented from freezing by performing 
temperature-maintenance operation of the fuel cell when the internal fuel cell temperature 
drops while the fuel cell system is not operating, and the commencement of temperature- 
20 maintenance operation based on an incorrect temperature determination can be prevented 

through the issuance of a warning when it is determined that an abnormality has occurred in 
the temperature detector. If temperature-maintenance operation is commenced based on an 
incorrect temperature determination, there is a danger that temperature-maintenance 
operation will be performed where there is no possibility of freezing, causing a drop in the 
25 energy efficiency of the fuel cell system as a whole, or that the temperature-maintenance 
operation will be performed after the water in the fuel cell has frozen. These potential 
problems can be avoided through the issuance of a warning when an abnormality occurs. 
[0007] In the fuel cell system pertaining to the first aspect of the present invention, it is 
acceptable if the temperature-maintenance operation controller stops temperature- . 
30 maintenance operation when the fuel cell operating temperature detected by the temperature 
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detector during such temperature-maintenance operation of the fuel cell equals or exceeds a 
second reference temperature which is higher than the first reference temperature. 
[0008] Using this construction, the termination of temperature-maintenance operation based 
on an incorrect temperature determination can be prevented through the issuance of a 

5 warning when it is determined that an abnormality has occurred in the temperature detector. 
If temperature-maintenance operation is stopped based on an incorrect temperature 
determination, temperature-maintenance operation is not stopped even when the fuel cell 
internal temperature has risen sufficiently, causing a reduction in the energy efficiency of the 
system, or the temperature-maintenance operation is stopped before the fuel cell temperature 

10 has risen sufficiently, thereby causing the water inside the fuel cell to freeze. Such problems 
can be avoided through the issuance of a warning upon the occurrence of an abnormality. 
[0009] In the fuel cell system pertaining to the first aspect of the present invention, it is 
acceptable the fuel cell system includes a plurality of the temperature detectors, the 
abnormality determination unit determines whether an abnormality has occurred in each of 

15 the plural temperature detectors, and when the abnormality determination unit determines an 
abnormality has occurred in any of the plural temperature detectors, the temperature- 
maintenance controller performs control pertaining to the temperature-maintenance operation 
based on the result of detection by the other temperature detectors as to which no abnormality 
was determined to exist. 

20 [0010] Using this construction, because plural temperature detectors are used, and when an 
abnormality is detected in any of the plural temperature detectors, a warning is issued and 
temperature-maintenance control is performed using the remaining temperature detectors, the 
reliability of the temperature-maintenance operation can be improved. 

[0011] A second aspect of the present invention provides a fuel cell system including a fuel 
25 cell. The fuel cell system pertaining to this second aspect of the present invention includes a 
plurality of temperature detectors that detect a fuel cell operating temperature, wherein the 
fuel cell operating temperature is a temperature that reflects the internal temperature of the 
fuel cell, an abnormality determination unit that determines whether a detection abnormality 
has occurred regarding the fuel cell operating temperature in any of the plural temperature 
30 detectors, and a temperature-maintenance operation controller that, when the abnormality 



3 



PF14K33X 



determination unit determines that an abnormality has occurred in any of the temperature 
detectors while the fuel cell system is not operating, executes temperature-maintenance 
operation of the fuel cell if the detected fuel cell operating temperature as detected by 
remaining temperature detectors that are determined that no abnormality has been occurred 

5 by the abnormality determination unit equals or is less than a first reference temperature. 
[0012] According to the second aspect of the present invention, because where an 
abnormality exists in any of the plural temperature detectors, temperature-maintenance 
operation is carried out based on the fuel cell operating temperature detected by those 
temperature detectors among the plural temperature detectors as to which no abnormality is 

10 determined to exist, the commencement of temperature-maintenance operation based on an 
incorrect temperature determination is prevented, and the reliability of the operation to begin 
the temperature-maintenance operation can be improved. 

[0013] In the fuel cell system pertaining to the second aspect of the present invention, it is 
acceptable if wherein the temperature-maintenance controller terminates the temperature- 

15 maintenance operation if any of the fuel cell operating temperature, which is detected by the 
remaining temperature detectors during the temperature-maintenance operation, equals or 
exceeds a second reference temperature that is higher than the first reference temperature. 
[0014] Using this construction, because the temperature-maintenance operation is stopped 
based on the fuel cell temperature as detected by only those temperature detectors that are 

20 determined to be free of any abnormality, the termination of temperature-maintenance 
operation based on an incorrect temperature determination can be prevented, and the 
reliability of the operation to commence the temperature-maintenance operation can be 
increased. 

[0015] In the fuel cell system pertaining to the first or second aspect of the present 
25 invention, it is acceptable if the abnormality determination unit determines that an 

abnormality exists when a signal indicating disconnection or short-circuit is output from a 
temperature detector. Using such a construction, the occurrence of an abnormality in a 
temperature detector can be easily determined. 

[0016] A third aspect of the present invention provides an operation method for a fuel cell 
30 system that detects the fuel cell operating temperature, which is the temperature that reflects 
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the internal temperature of the fuel cell, and executes temperature-maintenance operation of 
the fuel cell where the detected fuel cell operating temperature equals or falls below a first 
reference temperature. The fuel cell system operation method pertaining to the third aspect of 
the present invention includes determining whether an abnormality has been occurred in the 
5 temperature detector that detecting the fuel cell operating temperature when the fuel cell 
operating temperature is detected, and issuing a warning when an abnormality is detected in 
the temperature detector. 

[0017] According to the fuel cell system operation method pertaining to the third aspect of 
the present invention, because when the temperature of the fuel cell is detected, it is 

10 determined whether an abnormality has been occurred in the temperature detector that 
detected the fuel cell operating temperature, and a warning is issued in the event that an 
abnormality is detected in the temperature detector, the commencement of temperature- 
maintenance operation based on an incorrect temperature determination can be prevented. 
[0018] It is furthermore acceptable in the fuel cell system operation method pertaining to 

15 the third aspect of the present invention may further include detecting the fuel cell operating 
temperature while the fuel cell is in a temperature-maintenance operation, and stopping the 
temperature-maintenance operation when the detected fuel cell temperature equals or exceeds 
a second reference temperature that is higher than the first reference temperature.. 
[0019] The present invention can be implemented in various forms other than those 

20 described above. For example, it may be implemented in the form of an operating program 
for a fuel cell, or in the form of a recording medium on which such program is recorded. 

[0020] 

BRIEF DESCRIPTION OF THE DRAWINGS 
25 Fig. 1 is a block diagram showing the basic construction of an electric automobile in 

which a fuel cell system comprising an embodiment of the present invention is installed; 

Fig. 2 is a block diagram showing the construction of a circuit pertaining to processes 
to determine whether temperature-maintenance operation is required and whether an 
abnormality exists in a temperature sensor; 
30 Fig. 3 is a flow chart showing a temperature-maintenance operation control 
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processing routine; 

Fig. 4 is a flow chart showing an abnormality determination processing routine; 

Fig. 5 is a flow chart showing an abnormality determination processing routine 
comprising a variation of the first embodiment; 

Fig. 6 is a block diagram showing the basic construction of an electric automobile in 
which a fuel cell system is installed; 

Fig. 7 is a flow chart showing an abnormality determination processing routine; and 

Fig. 8 is a flow chart showing a temperature-maintenance operation control 
processing routine. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[0021] Embodiments of the present invention will be described below with reference to the 
drawings. 

A. Overall construction of apparatus 

Fig. 1 is a block diagram showing the basic construction of an electric automobile in 
which a fuel cell system comprising an embodiment of the present invention is installed. 
[0022] The fuel cell system 15 is a primary power source for an electric automobile 10, and 
includes a fuel cell stack 20, a hydrogen gas supply apparatus 24, a blower 26 and a cooling 
device 26. While various types of fuel cells may be used for the fuel cell stack 20, in this 
embodiment, solid macromolecule fuel cells are used for the fuel cell stack 20. 
[0023] The hydrogen gas supply apparatus 24 is an apparatus that supplies hydrogen gas 
that is stored inside the apparatus to the anode of the fuel cell stack 20 as fuel gas. For 
example, the hydrogen supply apparatus 24 may comprise a hydrogen cylinder or a hydrogen 
tank containing a hydrogen-occluded alloy. The fuel exhaust gas expelled from the anode 
after it is used for electrochemical reaction can be used once more for electrochemical 
reaction by guiding it to a flow path that connects the hydrogen supply apparatus 24 with the 
fuel cell stack 20 (not shown). Air is supplied by the blower 26 to the cathode of the fuel cell 
stack 20 as oxidization gas. 

[0024] The cooling device 30 includes a coolant path 28 that is formed such that it travels 
inside the fuel cell stack 20, a radiator 36, and a pump 34. Driving the pump 34 enables the 
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coolant to be circulated in the coolant path 28. When electrochemical reaction occurs in the 
fuel cell stack 20, heat is generated. Accordingly, by circulating coolant within the fuel cell 
stack 20 during power generation and cooling the coolant via the radiator 36, the operating 
temperature of the fuel cell stack 20 can be maintained within a prescribed range. The 

5 radiator 36 includes a cooling fan not shown, and cooling of the coolant by the radiator 36 
can be promoted through the driving of this cooling fan. A first temperature sensor 31 is 
disposed in the coolant path 28 near the area of its connection to the fuel cell stack 20 and on 
the side thereof at which coolant is expelled from the fuel cell stack 20. In Fig. 1, the 
direction of circulation of the coolant within the coolant path 28 is indicated by an arrow. 

10 [0025] The electric automobile 10 includes a secondary battery 52, which serves as a 
supplementary power source, in addition to the fuel cell system 15 described above. The 
secondary battery 52 is connected in parallel in relation to the fuel cell stack 20 via a DC/DC 
converter 50. An inverter 54 generates three-phase alternating current from these direct 
current power sources and supplies it to the motor 56 used to drive the vehicle. This 

15 [supplied] current controls the rotation speed and torque of the motor 56. 

[0026] A controller 40 is constructed as a logic circuit revolving around a microcomputer, 
and controls the movement of each component of the electric automobile 10, including the 
fuel cell system 15. In other words, it receives signals from the various sensors disposed in 
the electric automobile 10 such as the detection signals from the first temperature sensor 31, 

20 as well as outputs drive signals to the various components of [of the fuel cell system 15] such 
as the blower 26 and the pump 34 or the various components of [the electric automobile 10] 
such as the DC/DC converter 50 and the inverter 54. Furthermore, a start switch 58 that is 
used to input instructions to globally start and stop the vehicle system is disposed in the 
electric automobile 10, and the controller 40 receives ON/OFF signals (instructing system 

25 startup or shutdown) from the start switch 58. A warning issuance unit 59 that issues a 

warning when an abnormality is detected in the temperature sensor is disposed in the electric 
automobile 10, and the controller 40 outputs control signals to this warning issuance unit 59. 
In Fig. 1, the controller 40 is assumed to perform control for the entire electric automobile 10, 
including the fuel cell system 15, but it is acceptable if the controller pertaining to the fuel 

30 cell system 10 is different from the controller pertaining to the driving of the vehicle. In such 
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a case, information should be exchanged between the two controllers, such that control to 
carry out the operations described below is carried out with respect to the vehicle as a whole. 

[0027] 

B. Operation 

Fig. 2 is a block diagram showing the construction of a circuit that is disposed in the 
electric automobile 10 and pertains to processes to determine whether temperature- 
maintenance operation is required and whether an abnormality exists in the temperature 
sensor. As shown in Fig. 2, the controller 40 includes a temperature-maintenance operation 
controller 42 and an abnormality determination unit 44. Fig. 3 is a flow chart showing a 
temperature-maintenance operation control processing routine that is executed by the 
controller 40 of the electric automobile 10. When the switch 58 of the electric automobile 10 
is moved from the ON position to the OFF position, thereby stopping the [operation of] the 
fuel cell system 15, this routine is executed repeatedly until the switch 58 is once more 
switched to the ON position. 

[0028] When this routine is executed, the temperature-maintenance operation controller 42 
of the controller 40 first obtains a coolant temperature Tl from the first temperature sensor 31 
(step SI 00). When the coolant temperature Tl is obtained, the temperature-maintenance 
operation controller 42 determines whether or not this coolant temperature Tl is equal to or 
less than a first reference temperature TA1 (step SI 10). Here, the coolant temperature Tl 
reflects the temperature inside the fuel cell stack 20. The reference temperature TA1 is the 
coolant temperature at which it is possible that the water inside the fuel cell stack 20 will 
freeze, and is stored in the controller 40 as a preset value. For example, the first reference 
temperature TA1 is set to 2°C in this embodiment. Where the coolant temperature Tl is 
determined to equal or exceed the reference temperature TA1 in step SI 10, the temperature- 
maintenance operation controller 42 determines that the water inside the fuel cell stack 20 
will not freeze, and returns to step SI 00. It then repeats the operation of step SI 10 in which 
the controller 40 determines whether or not the coolant temperature Tl is equal to or less than 
the first reference temperature TA1. 

[0029] If it is determined in step S 1 10 that the coolant temperature Tl equals or is less than 
the reference temperature TA1, the temperature-maintenance operation controller 42 outputs 
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drive signals to the various components of the fuel cell system 15 and commences 
temperature-maintenance operation (step SI 20). Specifically, the controller 40 drives the 
hydrogen supply apparatus 24 and the blower 26 to begin the supply of hydrogen (fuel gas) 
and air (oxidization gas) to the fuel cell stack 20. It also drives the pump 34 to begin the 

5 circulation of coolant in the coolant path 28. Because the purpose of this temperature- 
maintenance operation is to prevent a drop in the temperature inside the fuel cell stack 20, the 
cooling fan comprising part of the radiator 36 and not shown in the drawings is not driven 
during temperature-maintenance operation. In addition, because it is not necessary to drive 
the motor 56, the amount of power generated during temperature-maintenance operation is 

10 kept very small. Specifically, the amount of power generated by the fuel cell stack 20 is 
limited to the level necessary to cover the amount of power consumed by the fuel cell 
auxiliary equipment such as the hydrogen supply apparatus 24, the blower 26 and the pump 
34. Here, because the amount of power that can be generated per unit of gas supplied to the 
fuel cell stack 20 varies depending on the internal temperature of the fuel cell stack 20, the 

15 amount of driving of the above fuel cell auxiliary equipment during temperature-maintenance 
operation can be adjusted based on the coolant temperature Tl detected by the first 
temperature sensor 31. Furthermore, in order to increase the temperature of the fuel cell stack 
20, a heater that heats the fuel cell stack 20 or the coolant may be disposed [adjacent thereto], 
such that some of the power generated by the fuel cell stack 20 is diverted to the heater to 

20 provide heat during temperature-maintenance operation. Moreover, if the amount of power 
remaining in the secondary battery is low, the secondary battery may be charged during 
temperature-maintenance operation . 

[0030] When temperature-maintenance operation is begun, the temperature-maintenance 
operation controller 42 obtains the coolant temperature Tl from the first temperature sensor 

25 31 (step SI 30). When the coolant temperature Tl is obtained, the temperature-maintenance 
operation controller 42 then determines whether or not this coolant temperature Tl equals or 
exceeds a second reference temperature TBI (step SI 40). The second reference temperature 
TBI is a reference temperature that indicates that the temperature inside the fuel cell stack 20 
has risen sufficiently, and is a preset value stored in the controller 40. For example, in this 

30 embodiment, the second reference temperature TBI is set at 7°C. If [it is determined] in step 



9 



PF14K33X 



SI 40 that the coolant temperature Tl has not reached the second reference temperature TBI, 
it is determined that the water in the fuel cell stack 20 could freeze, [the controller 40] returns 
to step SI 30, and performs the operation of comparing the detected coolant temperature Tl 
with the second reference temperature TBI once more in step S140. 
5 [0031] If the coolant temperature Tl is determined in step S 140 to equal or exceed the 
second reference temperature TBI, the temperature-maintenance operation controller 42 
stops the temperature-maintenance operation (step SI 50) and ends the routine. By repeating 
this operation, the fuel cell stack 20 is maintained within a temperature range in which there 
is no danger of the water inside freezing, even if the start switch 58 is OFF. Here, if the 

10 second reference temperature TBI is set too high, a large amount of heat is discharged 

outside the system during temperature-maintenance operation. Accordingly, it is preferred 
that the second reference temperature TBI be set as low as possible within a range that 
permits the temperature-maintenance operation shown in Fig. 3 to be started and stopped 
without difficulty, while taking into consideration the accuracy of the first temperature sensor 

15 31. For example, in this embodiment, the second reference temperature TBI is set to a 
temperature 5°C higher than the first reference temperature TA1. 

[0032] Fig. 4 is a flow chart showing the abnormality determination processing routine 
executed by the controller 40 of the electric automobile 10. This routine is executed 
repeatedly and independently while the temperature-maintenance operation control 

20 processing routine described above is being performed. 

[0033] When this routine is executed, the abnormality determination unit 44 of the 
controller 40 first obtains the coolant temperature Tl from the first temperature sensor 31 
(step S200). When the coolant temperature Tl is obtained, the abnormality determination unit 
44 determines whether or not the coolant temperature Tl is at or above the upper limit value 

25 or at or below the lower limit value (step S210). Here, the upper and lower limit values are 
values set in advance and stored in the controller 40 that represent abnormal values that fall 
outside the range of measurement of the first sensor 31 under the normal operating 
environment for the fuel cell system 15. In this embodiment, for example, the upper limit 
value is set to 120°C, while the lower limit value is set to -30°C. If the coolant temperature 

30 Tl is between the upper and lower limit values, it is determined that no abnormality exists in 



PF14K33X 



the first temperature sensor 31, and the routine is ended without further processing. 
[0034] If it is determined in step S210 that the coolant temperature Tl is at or above the 
upper limit value or at or below the lower limit value, the abnormality determination unit 44 
determines whether or not the state in which the coolant temperature Tl is at or above the 

5 upper limit value or at or below the lower limit value has continued for a prescribed period of 
time set in advance (step S220). The prescribed period of time for purposes of step S220 is 
intended to eliminate the effects of noise or the like, and is set to one second in this 
embodiment, for example. Where the state in which the coolant temperature Tl is at or above 
the upper limit value or at or below the lower limit value has not continued for the prescribed 

10 period of time, the detection of the abnormal value is deemed to be the result of noise or the 
like, and it is determined that there is no abnormality in the first sensor 31, whereupon the 
routine ends without further processing. 

[0035] If it is determined in step S220 that the state in which the coolant temperature Tl is 
at or above the upper limit value or at or below the lower limit value has continued for the 

15 prescribed period of time or longer, the abnormality determination unit 44 determines that an 
abnormality has occurred in the first temperature sensor 31 and outputs a drive signal to the 
warning issuance unit 59 (step S230), whereupon the routine ends. This warning issuance 
unit 59 notifies the operator of the electric automobile 10 that an abnormality has occurred in 
the first temperature sensor 31 through the issuance of a warning. The warning issuance unit 

20 59 may constitute a display screen, sound generating means or a warning lamp mounted to 
the electric automobile 10. The operator may be notified of the occurrence of an abnormality 
through the display of a warning on a display screen, the emission of a warning sound or the 
illumination of a warning lamp. A sound or warning lamp is preferred because the warning 
can be easily discernible even where the operator is located at a distance from the electric 

25 automobile 10. 
[0036] 

According to the fuel cell system 15 of the first embodiment having the construction 
described above, the freezing of water in the fuel cell can be prevented by carrying out 
temperature-maintenance operation when the temperature inside the fuel cell stack 20 drops 
30 while the system is not operating, and the operator can be notified of the occurrence of an 
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abnormality through the emission of a warning when it is determined that an abnormality has 
occurred in the first temperature sensor 31. As a result, the continuation of control to start or 
stop temperature-maintenance operation based on an incorrect temperature determination can 
be prevented. In other words, the problems of (i) a drop in the energy efficiency of the overall 
system caused by the performance of temperature-maintenance operation when there is no 
danger of freezing, or (ii) the commencement of temperature-maintenance operation after the 
water inside the fuel cell stack 20 has frozen, both of which are caused by starting 
temperature-maintenance operation based on an incorrect temperature determination, can be 
prevented. Furthermore, the problems of (i) a drop in the energy efficiency of the overall 
system caused by temperature-maintenance operation continued based on an incorrect 
temperature determination, even where the temperature of the fuel cell stack 20 has already 
been raised sufficiently, or (ii) the freezing of the water inside the fuel cell stack 20 due to the 
stoppage of temperature-maintenance operation before the temperature of the fuel cell stack 
20 has risen sufficiently, both of which are caused by stopping temperature-maintenance 
operation based on an incorrect temperature determination, can be prevented. 
[0037] In the above embodiment, the determination regarding the existence of an 
abnormality in the temperature sensor 31 was made based on the coolant temperature Tl 
detected from an output signal from the first temperature sensor 31, but it is acceptable if it is 
made based directly on the first temperature sensor 31 output signal. Where the first 
temperature sensor 31 comprises a thermistor, it can be determined that an abnormality has 
occurred in the first temperature sensor 31 when the output voltage value relative to the 
impressed voltage deviates from the value corresponding to the upper limit temperature value 
or lower limit temperature value described above. For example, reference values may be 
established whereby it is determined that an abnormality has occurred if, where the impressed 
voltage is 0.5V, the output voltage equals or exceeds the value of 0.49V corresponding to the 
upper limit temperature of 120°C, or equals or is lower than the value of 0.01 V 
corresponding to the lower limit temperature of -30°C. In this way, if the temperature sensor 
output voltage is a large value that exceeds the normal range of detection signals, it is 
assumed that a short-circuit has occurred in the wiring to the temperature sensor. Similarly, if 
the temperature sensor output voltage is a small value close to 0V that exceeds the normal 
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range of detection signals, it is assumed that a disconnection has occurred in the wiring to the 
temperature sensor. Therefore, it is acceptable if the type of abnormality is displayed on the 
display screen or the like when a warning is issued. 

[0038] In the first embodiment described above, the occurrence of an abnormality, such as 
5 a disconnection or a short-circuit, is detected in the first temperature sensor 31 by comparing 
the detected coolant value Tl with the upper and lower limit values, but various other types 
of abnormalities in the temperature sensor can exist as well. Fig. 5 is a flow chart showing an 
abnormality determination processing routine constituting a variation of the first embodiment. 
Here, in addition to the abnormality determination described in connection with the first 
10 embodiment, abnormalities occurring in the first temperature sensor 31 during the signal 
processing stage can also be detected. 

[0039] The abnormality determination processing routine of Fig. 5 is performed repeatedly 
and independently during the temperature-maintenance control processing routine described 
above in place of the processing shown in Fig. 4 by the controller 40 of an electric 

15 automobile 10 similar to the one described in connection with the first embodiment. 
[0040] Steps S300-S330 of this routine are the same as the steps S200-S230 of the 
abnormality determination processing routine shown in Fig. 4, [such that] when the detected 
coolant temperature Tl equals or exceeds the upper limit value or equals or is less than the 
lower limit value, the abnormality determination unit 44 determines that an abnormality has 

20 occurred in the first temperature sensor 31 and issues a warning. In the abnormality 

determination processing routine shown in Fig. 5, if it is determined in step S310 that the 
coolant temperature Tl does not equal or exceed the upper limit value and is not equal to or 
less than the lower limit value, the abnormality determination unit 44 determines whether or 
not the coolant temperature Tl has remained at a defined temperature for a prescribed period 

25 of time (step S340). The prescribed period of time and the range of defined temperatures in 
this step S340 are stored in advance in the controller 40 as the time period and range of 
temperatures within which a temperature change is expected under normal circumstances 
where the fuel cell 15 is left alone. For example, in this embodiment, the prescribed period of 
time is set to 10 minutes, and the range of defined temperatures is set to ±1°C. 

30 [0041] In step S340, if the coolant temperature Tl remains at a defined temperature for a 
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prescribed period of time, the abnormality determination unit 44 determines that an 
abnormality has occurred in the first temperature sensor 31 during the signal processing stage, 
a warning is issued indicating that an abnormality has occurred in the first temperature sensor 
31 (step S330), and the routine ends. On the other hand, if the coolant temperature Tl does 
not remain at a defined temperature for a prescribed period of time, it is determined in step 
S340 that an abnormality does not exist in the first temperature sensor 31, and the routine 
ends without further processing. 
[0042] 

C. Second embodiment 

Fig. 6 is a block diagram showing the basic construction of an electric automobile 110 
in which the fuel cell system 1 15 of the second embodiment is installed. Because the electric 
automobile 1 10 of the second embodiment has a construction similar to that of the electric 
automobile 10 of the first embodiment, common constituent elements will be assigned the 
same reference symbols, but detailed description thereof will be omitted. The fuel cell system 
1 15 of the second embodiment includes in the coolant path 28, in addition to the first 
temperature sensor 31, a second temperature sensor 32 that detects the temperature T2 of the 
coolant flowing into the fuel cell stack 20. The second temperature sensor 32 is disposed near 
the area of connection [of the coolant path 28] on the side at which the coolant flows into the 
fuel cell stack 20. 

[0043] Fig. 7 is a flow chart showing the abnormality determination processing routine 
executed by the controller 40 of the electric automobile 1 10 of the second embodiment. This 
routine is executed repeatedly in place of the abnormality determination processing routine of 
the first embodiment shown in Fig. 4. 

[0044] When this routine is executed, the abnormality determination unit 44 of the 
controller 40 first obtains the coolant temperatures Tl and T2 from the first and second 
temperature sensors 31 and 32, respectively (step S400). The abnormality determination unit 
44 then determines whether or not these coolant temperatures Tl and T2 equal or exceed or 
fall below, respectively, upper and lower limit values set in advance, in the same manner as 
in step S210 in Fig. 4 (step S410). As in the first embodiment, the upper and lower limit 
values referred to in step S410 are preset and stored in the controller 40 as reference values 
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for abnormal values that are not normally detected. In step S410, if both the coolant 
temperatures Tl and T2 fall between the upper and lower limit values, it is determined that 
no abnormality has occurred in either the first temperature sensor 31 or the second 
temperature sensor 32, whereupon the routine ends. 

[0045] In step S410, if the detected value for either the coolant temperature Tl or the 
coolant temperature T2 equals or is above or below the respective limit value, the 
abnormality determination unit 44 determines whether or not the state indicated by the 
abnormal value has been in existence for a preset prescribed period of time, as in step S220 
(step S420). If the state indicated by the abnormal value has not been in existence for the 
prescribed period of time, it is determined that an abnormality does not exist in the 
temperature sensor in which the abnormal value was detected, and the abnormality 
determination unit 44 ends the routine without further processing. 

[0046] If it is determined in step S420 that the state in which an abnormal value is detected 
has existed for at least the prescribed period of time in either temperature sensor, the 
abnormality determination unit 44 determines that an abnormality exists in the temperature 
sensor in which this abnormal value was detected and outputs a control signal to the warning 
issuance unit 59 (step S430), whereupon the routine ends. Where it is determined in step 
S430 that an abnormality exists in either temperature sensor, the abnormality determination 
unit 44 also outputs information to the temperature-maintenance operation controller 42 
identifying the temperature sensor experiencing the abnormality. In addition, in the 
abnormality determination process shown in Fig. 7, it is acceptable if such determination 
takes into account abnormalities that occur during the signal processing stage, as with the 
process shown in Fig. 5. 

[0047] Fig. 8 is a flow chart showing the temperature-maintenance operation control 
processing routine executed by the controller 40 of the electric automobile 1 10 of the second 
embodiment. This routine is repeatedly executed in place of the temperature-maintenance 
operation processing routine of the first embodiment shown in Fig. 3. 

[0048] When this routine is executed, the temperature-maintenance operation controller 42 
of the controller 40 first determines whether or not the occurrence of an abnormality has been 
detected in either the first temperature sensor 31 or the second temperature sensor 32 (step 
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S500). This determination is based on whether or not information indicating the existence of 
an abnormality in either sensor was transmitted to the temperature-maintenance operation 
controller 42 in step S430. 

[0049] If an abnormality is determined to have been detected in step S500, the temperature- 
maintenance operation controller 42 determines whether or not this abnormality exists in the 
first temperature sensor 31 (step S510). If it is determined that the abnormality is in the 
second temperature sensor 32 rather than the first temperature sensor 31, the temperature- 
maintenance operation controller 42 executes the processes of steps S520-S570, which 
correspond to the processes of steps S100-S150 of Fig. 3, whereupon the routine ends. In 
other words, control to start and stop temperature-maintenance operation is executed based 
on the coolant temperature Tl detected by the first temperature sensor 31. 
[0050] On the other hand, if it is determined in step S510 that an abnormality exists in the 
fust temperature sensor 31, the temperature-maintenance operation controller 42 executes 
control to start and stop temperature-maintenance operation based on the coolant temperature 
T2 detected by the second temperature sensor 32 (steps S580-S620 and step S570), 
whereupon the routine ends. These processes correspond to the processes of steps S520-S570. 
Here, instead of the first and second reference temperatures TA1 and TBI established for the 
purpose of making the determination based on the coolant temperature Tl, the determination 
is made based on a first reference temperature TA2 and a second reference temperature TB2 
established for the purpose of making the determination based on the coolant temperature T2. 
[0051] If an abnormality was not detected in either temperature sensor in step S500, control 
to start and stop temperature-maintenance operation is carried out based on the coolant 
temperature detected by either temperature sensor. In this embodiment, when both 
temperature sensors are functioning normally, control is executed based on the coolant 
temperature Tl detected by the first temperature sensor 31 (steps S520-S570). 
[0052] According to the fuel cell system 1 15 of the second embodiment having the above 
construction, because (i) multiple temperature sensors are used, and (ii) if an abnormality is 
detected in either temperature sensor, a warning is issued and control is executed to perform 
temperature-maintenance operation using the other temperature sensor, the reliability of the 
temperature-maintenance operation can be improved. In other words, the commencement and 
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termination of temperature-maintenance operation based on an incorrect temperature 
determination can be prevented. Furthermore, in the second embodiment, a first temperature 
sensor 31 and a second temperature sensor 32 were used for detection of the internal 
temperature of the fuel cell stack 20, but the same control process may be executed using 
5 three or more temperature sensors. 
[0053] 

D. Other Embodiments 

This invention is not limited to the examples and embodiments described above, and 
may be implemented in various forms within the essential scope of the invention. For 

10 example, the variations described below may be employed. 

[0054] (1) In the first and second embodiments, the temperature-maintenance operation 
was controlled based on the coolant temperature, but it is acceptable if the stack internal 
temperature is detected directly, and various measurement values may be used for this 
purpose so long as the value chosen accurately reflects the internal temperature of the fuel 

15 cell stack 20. For example, if an apparatus that includes a reformer instead of an apparatus 
that stores hydrogen gas is used as the hydrogen supply apparatus 24, the determination may 
be made based on the internal temperature of the reformer or on the temperature of the fuel 
gas supplied to the fuel cell stack 20. 

[0055] During operation of the fuel cell system in order to perform temperature- 
20 maintenance operation, the temperature inside the fuel cell stack may be determined based on 
the output current or output voltage from the fuel cell stack. Because the output voltage value 
associated with the output current of the fuel cell characteristically changes in accordance 
with the internal temperature of the fuel cell stack, the determination of whether the fuel cell 
stack internal temperature has risen sufficiently can be made based on detection of the output 
25 current and output voltage. 

[0056] Alternatively, the atmospheric temperature may be detected as a value to reflect the 
internal temperature of the fuel cell stack 20. Here, where the an abnormality exists in the 
other temperature detector and determination of the need to carry out temperature- 
maintenance operation is made based solely on the atmospheric temperature, if the 
30 atmospheric temperature remains at or below a prescribed temperature for a sustained period 
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of time, temperature-maintenance operation may be continued longer than necessary. As a 
result, in this situation, it is acceptable if a process wherein temperature-maintenance 
operation is carried out for a prescribed period of time and such operation is then suspended 
for another prescribed period of time is executed repeatedly. 

5 [0057] (2) In the first and second embodiments, the fuel cell stack 20 and the secondary 
battery 52 are connected to the load in parallel, such that they can be both used as power 
sources, but a different construction may be utilized. For example, a construction may be 
employed wherein the secondary battery 52 is used only to drive the vehicle auxiliary 
equipment, and only the fuel cell is used as the power source to drive the vehicle. The same 

10 effect may be obtained from application of the present invention where the fuel cell supplies 
power to the load while the system is running, and fuel cell operation is stopped when the 
system is stopped. 

[0058] (3) Furthermore, while in the above embodiments, the fuel cell system was 
installed in an electric automobile, the same effect can be obtained from application of the 
15 present invention where the fuel cell system is used as a stationary power source. 
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